Details
-
Bug
-
Resolution: Duplicate
-
Not Evaluated
-
None
-
6.8
-
None
-
Linux 6.11, glibc 2.41
Description
I'm seeing QtWebEngineProc crash frequently on my system with the backtrace:
Thread 1 (Thread 0x7f76f87e33c0 (LWP 1)): #0 __GI___mmap64 (addr=0x0, len=4096, prot=3, flags=40, fd=-1, offset=0) at ../sysdeps/unix/sysv/linux/mmap64.c:58 #1 __GI___mmap64 (addr=addr@entry=0x0, len=4096, prot=3, flags=40, fd=fd@entry=-1, offset=offset@entry=0) at ../sysdeps/unix/sysv/linux/mmap64.c:46 #2 0x00007f7703e45a03 in vgetrandom_get_state_alloc () at ../sysdeps/unix/sysv/linux/getrandom.c:96 #3 vgetrandom_get_state () at ../sysdeps/unix/sysv/linux/getrandom.c:168 #4 getrandom_vdso (buffer=buffer@entry=0x7ffed6c78600, length=length@entry=8, flags=flags@entry=0, cancel=cancel@entry=false) at ../sysdeps/unix/sysv/linux/getrandom.c:202 #5 0x00007f7703e45eab in __getrandom_nocancel (buffer=buffer@entry=0x7ffed6c78600, length=length@entry=8, flags=flags@entry=0) at ../sysdeps/unix/sysv/linux/getrandom.c:341 #6 0x00007f7703e431bd in __GI___arc4random_buf (p=0x7ffed6c78600, n=8) at arc4random.c:45 #7 0x00007f7703db365d in ??? () at /lib64/libexpat.so.1 #8 0x00007f7703db38b1 in XML_ParseBuffer () at /lib64/libexpat.so.1 #9 0x00007f770337ad35 in ??? () at /lib64/libfontconfig.so.1 #10 0x00007f7703362474 in ??? () at /lib64/libfontconfig.so.1 #11 0x00007f770335c309 in ??? () at /lib64/libfontconfig.so.1 #12 0x00007f7703363099 in FcInit () at /lib64/libfontconfig.so.1 #13 0x00007f770b13f945 in ??? () at /lib64/libQt6WebEngineCore.so.6 #14 0x3ff0000000000000 in ??? () #15 0x0000000000000000 in ??? ()
This crash happens because libexpat is making a call to arc4random_buf(), which causes glibc 2.41 (since commit 461cab1de747f3842f27a5d24977d78d561d45f9) to engage the new vDSO getrandom() support available since Linux 6.11. That does an mmap() system call and that crashes the helper with signal SIGSYS. This has to be the webengine's sandbox.
Attachments
Issue Links
- duplicates
-
QTBUG-134631 Any Chromium error page causes renderer process crash
-
- Closed
-